
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4e85c1b3-cc18-3afd-9b2f-67b937490c1b.roa
File: 4e85c1b3-cc18-3afd-9b2f-67b937490c1b.roa (raw, json)
Hash identifier: oBfRG5+pIvhaXxMvNuhwyOr70/BwwVOtbJ3ic4EzJEI=
Subject key identifier: B9:1F:20:98:1D:2E:5F:FA:0A:05:C5:86:48:EE:F3:B0:A1:D3:74:70
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584B6797EFCF0A272DA569508180
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4e85c1b3-cc18-3afd-9b2f-67b937490c1b.roa
Signing time: Sat 04 Oct 2025 01:00:33 +0000
ROA not before: Sat 04 Oct 2025 01:00:33 +0000
ROA not after: Fri 02 Jan 2026 02:00:33 +0000
asID: 30036
IP address blocks: 2604:2d80:9900::/41 maxlen: 41
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 07:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:67:97:ef:cf:0a:27:2d:a5:69:50:81:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Oct 4 01:00:33 2025 GMT
Not After : Jan 2 02:00:33 2026 GMT
Subject: CN=4ff9e05a-cc0b-49ac-8ac7-68036243d57d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b3:9d:11:f5:4b:8c:45:7c:47:69:85:3d:72:
28:92:fc:ae:9c:b9:b7:33:e9:0d:3b:94:04:1d:7a:
b4:ae:c7:39:cc:69:30:d7:9a:fc:31:19:5c:9f:bd:
1a:e5:38:75:22:ee:90:e6:89:c6:1b:6a:40:a4:6e:
94:6f:28:ff:13:c4:24:98:a4:e8:7e:1c:2a:b6:65:
27:3b:29:dd:27:4f:16:16:b7:29:dc:56:aa:19:ed:
cc:9a:31:88:dc:4a:05:0b:a2:78:6f:6f:ce:ab:bd:
25:f0:c6:f5:8b:2c:fc:28:eb:fa:e5:e8:8b:93:ee:
58:fd:05:09:23:40:26:df:6d:09:67:5c:02:de:38:
e6:f6:75:da:be:37:7a:c4:74:e2:89:52:cd:03:99:
45:0f:28:f5:b7:8a:f1:13:70:26:7e:79:a8:a1:53:
0e:93:b6:f5:56:fe:6c:8b:a8:08:bd:4d:6d:10:df:
c3:0e:f1:81:ac:11:c5:8d:08:6d:f5:bb:b2:0b:d4:
72:28:0a:34:69:6e:d4:11:fc:8c:fe:2c:47:2e:dd:
0f:8b:3f:1b:26:32:dd:0a:d9:a1:89:8b:f2:45:6b:
87:b0:c1:fb:37:d6:2d:f9:c8:85:9c:d0:7b:e1:b7:
46:91:9f:8b:33:4b:54:08:02:66:77:7a:1b:a0:e6:
dc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:1F:20:98:1D:2E:5F:FA:0A:05:C5:86:48:EE:F3:B0:A1:D3:74:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4e85c1b3-cc18-3afd-9b2f-67b937490c1b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2d80:9900::/41
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:ec:46:9a:fc:8b:64:ff:93:71:c1:c4:4c:89:1a:a8:db:48:
09:3c:ee:97:0d:72:0f:2b:0f:96:1f:11:d6:73:9e:2d:79:5f:
cc:57:18:26:83:76:ef:88:0c:f5:dc:1f:11:28:27:b0:00:36:
aa:ff:5f:4b:ce:83:a7:e9:e9:78:70:c3:d0:89:4f:89:2e:95:
dd:35:92:95:ce:be:cb:67:17:4d:b3:9f:e1:83:f7:54:3f:11:
e7:6c:27:5a:69:af:c8:57:5d:ec:9c:a4:76:04:3e:50:ac:1e:
1a:c7:bc:7a:18:db:1d:1a:df:de:de:61:2c:e0:f9:ab:be:7f:
63:bd:ae:c2:dd:84:76:a8:cd:8f:de:03:69:f7:59:69:e3:d3:
7a:c5:bc:b9:32:f1:82:cb:38:bf:b7:6f:d4:32:43:54:2d:24:
c3:ca:e5:07:13:55:46:a2:96:c0:4f:03:6d:33:e8:6c:1d:9a:
f6:0a:62:93:9f:3e:79:d1:d0:d6:b1:5b:a3:63:d1:5c:d8:0b:
64:3e:59:b6:74:85:29:98:b4:6b:fb:47:e8:d7:fa:d0:85:6c:
65:ab:01:ae:c8:4f:fb:3d:e9:d6:02:0e:12:b6:5a:a1:cf:aa:
6d:80:16:84:93:80:43:b3:8b:e7:32:23:8e:77:d8:3c:f1:86:
a7:dc:67:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:42:29 2025 by rpki-client